Initial commit — SETEC LABS Manager (Setec_CDM)

Flask-based VPS management panel with SSH remote command execution.
Includes E2E encrypted SSH tunnel (AES-256-GCM + Go agent), setup wizard,
security hardening tools, DNS management, firewall configs, monitoring,
backup, and .sec patch update system.

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

updates/sec/ubuntu2210_0326.sec

@@ -0,0 +1,49 @@
+# Setec Labs Security Update — Ubuntu 22.10 Kinetic
+# Release: 2026-03
+# Target: Ubuntu 22.10 (Kinetic Kudu)
+# Author: seteclabs.io
+#
+# !! WARNING: Ubuntu 22.10 reached End of Life on July 20, 2023 !!
+# No further security patches are available from Canonical.
+# This .sec file provides upgrade guidance only.
+
+[packages]
+# IMPORTANT: 22.10 repos are archived. Update sources first if needed.
+# sed -i 's|archive.ubuntu.com|old-releases.ubuntu.com|g' /etc/apt/sources.list
+# sed -i 's|security.ubuntu.com|old-releases.ubuntu.com|g' /etc/apt/sources.list
+apt-get update -qq
+apt-get install -y --only-upgrade openssl libssl3
+apt-get install -y --only-upgrade openssh-server openssh-client
+apt-get install -y --only-upgrade curl libcurl4
+apt-get install -y --only-upgrade sudo
+
+[sysctl]
+# Minimal hardening — upgrade ASAP
+net.ipv4.tcp_syncookies = 1
+net.ipv4.conf.all.rp_filter = 1
+net.ipv4.conf.all.accept_redirects = 0
+net.ipv4.conf.all.send_redirects = 0
+kernel.randomize_va_space = 2
+fs.protected_hardlinks = 1
+fs.protected_symlinks = 1
+
+[services]
+systemctl restart ssh
+
+[files]
+chmod 600 /etc/ssh/sshd_config
+
+[custom]
+# Display EOL warning prominently
+bash:-:echo '=========================================='
+bash:-:echo 'WARNING: Ubuntu 22.10 is END OF LIFE'
+bash:-:echo 'No security patches since July 2023!'
+bash:-:echo '=========================================='
+bash:-:echo ''
+bash:-:echo 'Recommended upgrade path:'
+bash:-:echo '  22.10 -> 23.04 -> 23.10 -> 24.04 LTS'
+bash:-:echo ''
+bash:-:echo 'Or fresh install Ubuntu 24.04 LTS (recommended)'
+bash:-:echo ''
+bash:-:echo 'To begin upgrade: do-release-upgrade'
+bash:-:echo '=========================================='